Malware.AI.1618342247 False Positive

[ErikMouse]

The following files, IPVanish Installers, are now being flagged by Malwarebytes in a recent scan that took place earlier and I believe it is a false positive.

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 5/15/21
Scan Time: 2:44 AM
Log File: ffa1b96e-b548-11eb-831d-00248199f553.json

-Software Information-
Version: 4.3.0.98
Components Version: 1.0.1273
Update Package Version: 1.0.40414
License: Premium

-System Information-
OS: Windows 10 (Build 19041.985)
CPU: x64
File System: NTFS
User: System

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Scheduler
Result: Completed
Objects Scanned: 368120
Threats Detected: 3
Threats Quarantined: 0
Time Elapsed: 1 hr, 38 min, 22 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 1
Malware.AI.1618342247, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\IPVanish 3.2.5.1, No Action By User, 1000000, 0, , , , , , 

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 2
Malware.AI.1618342247, C:\PROGRAMDATA\CAPHYON\ADVANCED INSTALLER\{3CAA8FE3-47C3-48F3-B773-D4F81C1D88B7}\IPVANISH-3.2.5.1.EXE, No Action By User, 1000000, 0, 1.0.40414, D043EA2D781E0B686075F167, dds, 01245743, D1539DDAF7C9C4D07B858350536740C3, 643EF51FA0AAD722027116988FC0D8B13BD794F9415713BAF8F2FA58424412A8
Malware.AI.1618342247, C:\USERS\ERIK\DOWNLOADS\IPVANISH-SETUP.EXE, No Action By User, 1000000, 0, 1.0.40414, D043EA2D781E0B686075F167, dds, 01245743, D1539DDAF7C9C4D07B858350536740C3, 643EF51FA0AAD722027116988FC0D8B13BD794F9415713BAF8F2FA58424412A8

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)


(end)

--
Erik Mouse

IPVanish.zip

[shadowwar]

This is a fp and has been fixed. 

Thanks for reporting.